General

  • Target

    4080501ff68affc83aeb55211c533bf7

  • Size

    51KB

  • MD5

    4080501ff68affc83aeb55211c533bf7

  • SHA1

    7ce0e0e4fee116966875750e10b6b5564c7a68e2

  • SHA256

    41bc3d81d17fd6016519e128cf66e916fec4698a46ba0165a5e902dd3e0a1e39

  • SHA512

    0dbbcba1144c6f7593037ec9a4dc40cc686e01aa72f424cbbec763ebce6f83491b9d679ec6c3cc3b18aa7fd582063b10e751e3b4b9d52441d9d0bd9300e6e16f

  • SSDEEP

    1536:uIAi+Cpbv3T93x2inw93xyND+6OCl4dU+gHLLHwaP70:PcCpSinw9hO+vCe6LHwaPY

Score
10/10
upx

Malware Config

Signatures

  • Nirsoft 1 IoCs
  • NirSoft MailPassView 1 IoCs

    Password recovery tool for various email clients

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4080501ff68affc83aeb55211c533bf7
    .zip
  • Mail PassView 1.42/mailpv.chm
    .chm
  • Mail PassView 1.42/mailpv.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Mail PassView 1.42/mailpv_lng.ini
  • Mail PassView 1.42/readme.txt